101 Commits (201ecd5618053d83565ba7bf0950e7a67cec6e20)

Author	SHA1	Message	Date
Jason Ish	17bd53c29c	rust/ffi: add flow accessors to flow wrapper ... Ticket: #8599	3 weeks ago
Jason Ish	d3d206faa5	rust/ffi: add safe flow storage wrapper ... Add a typed FlowStorage<T> wrapper around the flow storage bindings. Update example and docs. Ticket: #8447	3 weeks ago
Jason Ish	8cf5d4d770	rust/ffi: use Flow wrapper in flow and eve callbacks ... Pass the safe Flow wrapper to the flow init/update/finish callbacks and the EVE callback instead of a raw sys::Flow pointer. Ticket: #8599	3 weeks ago
Jason Ish	440e15878b	flow: update example plugin to use address accessors	3 weeks ago
Jason Ish	f205d181f9	examples: use flow access functions ... To prevent direct access to the flow structure and be subject to changes in its size. Ticket: #8632	3 weeks ago
Denis Balashov	3b5bdc4261	examples: check rate filter callback registration result ... Check DetectEngineEnabled() before registering, and warn if the registration call returns false.	3 months ago
Jason Ish	3dc8b154f3	rust/ffi: add safe thread storage wrapper ... Add a typed ThreadStorage<T> wrapper around the thread storage bindings. Ticket: #8445	3 months ago
Jason Ish	5e0abf1572	rust/ffi: use ThreadVars wrapper in flow callbacks ... Update the flow init, update and finish callback registrations to pass the safe ThreadVars wrapper instead of a raw pointer. Ticket: #8598	3 months ago
Jason Ish	1cac242948	rust/ffi: use ThreadVars wrapper in eve callback ... Update the EVE callback registration to pass the safe ThreadVars wrapper instead of a raw pointer. Ticket: #8598	3 months ago
Jason Ish	45762aa644	rust/ffi: use ThreadVars wrapper in thread init callback ... Update the thread init callback registration to pass the safe ThreadVars wrapper instead of a raw pointer. Ticket: #8598	3 months ago
Jason Ish	144f824f17	rust/ffi: add thread init callback wrapper ... Ticket: #8605	4 months ago
Jason Ish	e1a2a36ee7	examples/plugins/rust: misc cleanups ... - Remove registration helper - Limit function visibility	4 months ago
Promise Charles	5c9602bcf2	suricata: add error about missing runmode ... If a runmode is missing but other params are passed on the commandline, issue an error. Ticket: #5711 Signed-off-by: Promise Charles <descencybobby@gmail.com>	4 months ago
Philippe Antoine	5db471500c	rust/ffi: remove altemplate plugin last dependency on suricata crate ... Ticket: 7666	4 months ago
Jason Ish	5e2a33d080	examples: add flow callbacks to rust plugin example ... Ticket: #8446	4 months ago
Philippe Antoine	5ed394b26b	rust/ffi: move AppLayerEvent to ffi ... Ticket: 7666	4 months ago
Philippe Antoine	9b12fd9f09	rust/ffi: move helper trait state_get_tx_iterator to ffi ... Ticket: 7666	4 months ago
Philippe Antoine	07f37676b6	rust/ffi: move Flags for AppLayerParserState to ffi crate ... Ticket: 7666	4 months ago
Philippe Antoine	fb20c69d8d	rust/ffi: move APP_LAYER_PARSER_OPT_X const to ffi crate ... Ticket: 7666	4 months ago
Philippe Antoine	9677851637	rust/ffi: move app-layer traits to ffi crate ... Ticket: 7666 Traits around structures defined in C and bindgened to rust	5 months ago
Philippe Antoine	f803c25f24	rust/ffi: move export_X_data_get macros to ffi crate ... Ticket: 7666	5 months ago
Jason Ish	f5bf76c0ee	examples/plugins/rust: add a rust example plugin ... Only demonstrates EVE callbacks for now, but I plan to turn this into a show case of a variety of callbacks a Rust plugin can do as we add Rust bindings to the ffi crate.	5 months ago
Philippe Antoine	58a71d94b0	rust/ffi: move conf_get helper to ffi crate ... Ticket: 7666	5 months ago
Philippe Antoine	c53b9df5a2	rust/ffi: move detection helpers to ffi crate ... Ticket: 7666	5 months ago
Philippe Antoine	f61247e846	plugin: remove one small suricata crate dependency	6 months ago
Philippe Antoine	267c3baff7	rust/ffi: move STREAM_ constants to ffi crate ... Ticket: 7666 reexport them in suricata crate cbindgen them to C	6 months ago
Philippe Antoine	d77c43c79b	rust/ffi: move build_slice macro to ffi crate ... Ticket: 7666	6 months ago
Philippe Antoine	4a0143c8d4	rust/ffi: move cast_pointer macro to ffi crate ... Ticket: 7666	6 months ago
Jason Ish	f711e57e8e	examples/lib/live: a lib example with live capture ... Simple libpcap example for live capture. Allows listening on multiple interfaces to show how multiple threads (workers) can be used. Ticket: #8096	6 months ago
Jason Ish	7dd23392cc	examples/lib/cplusplus: simplfy, make more like the simple example ... To prep for the removal of the lib runmode, simplify this C++ example to match our simple example. We don't yet have the C++ compatible headers to allow for a C++ app to register its own custom runmode.	6 months ago
Jason Ish	445de77c71	examples/lib/custom: use own custom run mode ... Debug validation revealed that library ThreadVars were being created *after* the threads were sealed. And the only way to create your ThreadVars that fits within the current application life-cycle is to create them in your own custom run mode. This is likely a better model for users who are bringing their own packets and threads anyways, as they are essentially providing their own capture method, and all capture methods provide their own run mode. They're also using their own threads, which means adapting to their own threading model. This is suitable for a backport to 8.0. But for 9.0 we can go further and remove the built-in library run mode, which will be done in a follow-up commit. Ticket: #8259	6 months ago
Philippe Antoine	71b59f6dbe	rust/ffi: move IPPROTO_TCP to ffi ... and reexport in suricata Allows to reduce dependencies to full suricata crate Ticket: 7666	7 months ago
Philippe Antoine	2a90cef318	plugin: reduce dependency on suricata crate ... Ticket: 7666 The end goal is to remove all dependencies on suricata and just use suricata_sys or suricata_ffi For now, make usage of what is already available	7 months ago
Jason Ish	d230a760e6	examples/altemplate: update to use jsonbuilder from ffi crate	7 months ago
Jason Ish	f79158ae55	rust/sys: generate jsonbuilder bindings in sys ... Bindgen the Rust bindings to the C JsonBuilder API along with the rest of the Rust bindings to C. Breaking it out was probably the wrong idea. This should make it easier, and more correct to bindgen C functions that use SCJsonBuilder types.	7 months ago
Jason Ish	8e3bd1ca55	examples/altemplate: use suricata-ffi for logging macros	7 months ago
Philippe Antoine	364d2c077d	rust: bindgen SCAppLayerRegisterParser ... Ticket: 7662	7 months ago
Philippe Antoine	c960b7d7c1	app-layer: AppLayerParserFPtr uses a mut pointer to local storage ... So, fix the fn prototype in rust ParseFn	8 months ago
Philippe Antoine	455b7d1b3b	rust: use snake case for applayer_register_protocol_detection	9 months ago
Victor Julien	46203de0e9	doc: adjust for master to main rename	1 year ago
Jason Ish	116d1763d9	lib: opt-in signal handlers ... Instead of enabling signal handlers by default, require the user of the library to opt-in. This is done with the call to SCEnableDefaultSignalHandlers, which sets a flag to add the default signal handlers. This seems like the least invasive way to do this at this time, but it will require some re-thinking for 9.0, especially if migrate globals to engine instances, signal handling will need to be re-thought. Ticket: #6814	1 year ago
Philippe Antoine	6dbc421825	rust: bindgen AppLayerParserConfParserEnabled ... Ticket: 7667	1 year ago
Philippe Antoine	49b2a2be5d	rust: bindgen SCAppLayerParserRegisterLogger ... Ticket: 7667	1 year ago
Philippe Antoine	b29d46d81f	rust: bindgen SCAppLayerParserStateIssetFlag ... Ticket: 7667	1 year ago
Jason Ish	25e32f4f7a	output: delayed initialization for custom loggers ... When a plugin is first initialized, it is too early to register transaction loggers. Instead, a plugin can register a callback to be called when Suricata is ready for outputs like transaction loggers to be registered. Likewise for library users, there is a window in SuricataInit where transaction loggers can be registered that library users don't have access to. So a lifecycle callback useful here as well. Ticket #7236	1 year ago
Philippe Antoine	7bb0c94ae9	rust: bindgen app-layer-detect-proto.h ... Ticket: 7667	1 year ago
Philippe Antoine	f2e7309bbb	rust: use bindgened Flow definition ... Ticket: 7667	1 year ago
Philippe Antoine	78034b218d	rust: bindgen SCDetectSignatureSetAppProto ... Ticket: 7667	1 year ago
Philippe Antoine	dc20129195	rust: bindgen SCDetectHelperBufferMpmRegister ... Ticket: 7667	1 year ago
Philippe Antoine	e2603fa820	detect/single-buf: new simple wrapper ... Introduce DetectGetSingleData which does the generic wrapping, including the transforms, using a new callback prototype DetectTxGetBufferPtr The goal is to replace most InspectionBufferGetDataPtr. For this commit, we do not change every callback to keep the change relatively small. Focus here is to remove DetectHelperGetData as its functionality is provided more directly by the new DetectTxGetBufferPtr.	1 year ago